openssl vulnerabilities (Mageia)
182 vulnerabilities.
opensslMageiaTiming attack against DSA5.9 MediumopensslMageiaClient DoS due to large DH parameter7.5 HighopensslMageiaCache timing vulnerability in RSA Key Generation5.9 MediumopensslMageiaConstructed ASN.1 types with a recursive definition could exceed the stack6.5 MediumopensslMageiaThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumopensslMageiaOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 MediumopensslMageiaThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumopensslMageiaWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumopensslMageiaBN_mod_exp may produce incorrect results on x86_645.9 MediumopensslMageiaTruncated packet could crash via OOB read7.5 HighopensslMageiaThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 MediumopensslMageiaMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 HighopensslMageiaThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 MediumopensslMageiaInteger overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0...9.8 CriticalopensslMageiaThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 HighopensslMageiaThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 CriticalopensslMageiaThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 HighopensslMageiaThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 HighopensslMageiaThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 HighopensslMageiaThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...7.5 HighopensslMageiaThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 MediumopensslMageiaOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 CriticalopensslMageiaThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...5.9 MediumopensslMageiaInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 HighopensslMageiaInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 HighopensslMageiaThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 HighopensslMageiaThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...9.8 CriticalopensslMageiaMemory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2...7.5 HighopensslMageiaMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...7.5 HighopensslMageiaThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...5.1 MediumopensslMageiaDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...9.8 CriticalopensslMageiaThe DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not...3.7 LowopensslMageiassl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of...5.9 MediumopensslMageiaThe ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote...5.0 MediumopensslMageiassl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...4.3 MediumopensslMageiaThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...5.3 MediumopensslMageiacrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...7.5 HighopensslMageiaThe X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1...6.5 MediumopensslMageiaThe OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow...4.3 MediumopensslMageiaMemory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1...5.0 MediumopensslMageiaThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not...5.0 MediumopensslMageiaThe ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL...4.3 MediumopensslMageiaMultiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1...7.5 HighopensslMageiaThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...4.3 MediumopensslMageiaRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...6.8 MediumopensslMageiaThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...6.8 MediumopensslMageiaThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...4.3 MediumopensslMageiaRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...4.0 MediumopensslMageiaThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...7.5 HighopensslMageiaThe ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS...4.3 Medium- Show moreLoading…